Dashboards & Visualizations

Why are dashboards of an app not found on a pooled search head?

tamasmarton
Explorer

I have just configured two search heads in a pool. etc/user and etc/app are on a shared UNC location.
the app/(appname)/search works well.
the app/(appname)/(dashboardname) returns 404 Page not found.

I checked the permissions and shared with app and set to Everyone read and admin for write.
The same "page not found" appears when I create a new dashboard.

When I use the built in search app, then the dashboards display well.

is there any other thing I might missed or is it a restriction that only the buil-in apps can be displayed?

0 Karma
1 Solution

tamasmarton
Explorer

Found the solution. An empty folder with the same name has to be created on local etc/app on every search heads.
It solves the problem. Apps are working fine.

For creating a new app on the search head pool:
1. create an app over the web page
2. it will throw an exception.
3. don't panic!
4. go to the search head's local etc/app folder(it will be on that search head where you the load balancer routed. So it is only on one search head) and move the appname folder to the shared etc/app/ folder
5. create the empty app folder in the local etc/app folder on every search heads.
6. now you can edit and use the new app
7. be happy! 😉

I hope that helps

View solution in original post

tamasmarton
Explorer

Found the solution. An empty folder with the same name has to be created on local etc/app on every search heads.
It solves the problem. Apps are working fine.

For creating a new app on the search head pool:
1. create an app over the web page
2. it will throw an exception.
3. don't panic!
4. go to the search head's local etc/app folder(it will be on that search head where you the load balancer routed. So it is only on one search head) and move the appname folder to the shared etc/app/ folder
5. create the empty app folder in the local etc/app folder on every search heads.
6. now you can edit and use the new app
7. be happy! 😉

I hope that helps

Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...